ckeditor-dev@4.4.8 vulnerabilities
The development version of CKEditor - JavaScript WYSIWYG web text editor.
-
latest version
4.12.1
-
latest non vulnerable version
-
first published
9 years ago
-
latest version published
5 years ago
-
licenses detected
Direct Vulnerabilities
Known vulnerabilities in the ckeditor-dev package. This does not include vulnerabilities belonging to this package’s dependencies.
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.Vulnerability | Vulnerable Version |
---|---|
ckeditor-dev is a browser-based WYSIWYG editor. Affected versions of this package were vulnerable to Cross-site Scripting (XSS) attacks via a link's display test. The vulnerability was found by James Gaskell How to fix Cross-site Scripting (XSS)? Upgrade |
<4.5.11
|